Disable Forced Encryption and Decrypt Nexus 6P

So I was there at XDA-Developers, and a few users were going crazy since they couldn’t decrypt their 6P’s storage after installing the latest Developer Preview. The solution is no biggie, you just need to understand what’s going on and deal with it. We are here to help you disable forced encryption and finally decrypt Nexus 6P. This tutorial will cover any 6P running Android N Developer Preview, or latest Android Marshmallow build.

What Is Forced Encryption?

Google wanted its users to have their data secured, and so they forced encryption on the Nexus 6P, to render a better sense of security. ‘Forced‘ in irony, that encryption will be enforced on the 6P at its first boot, and also that Google forced its own decision to the users. Like in the previous versions of Android, Google should have left this choice to the users, and saved all the trouble.

You will need to disable forced-encryption in order to make permanent changes to the device’s filesystem, like flashing mods, tweaks, etc. Until you disable forced-encryption, and decrypt your 6P, you would not be able to perform any such functions.

Forced-encryption is implemented on your device, through the kernel. So, if you would like to disable forced encryption on Nexus 6P, and decrypt it, you will first need to flash a kernel that has Verity Check disabled. Most custom kernels have this disabled, but it is always advised to head up first with the stock kernel, with Verity Check disabled.

After flashing the custom kernel (boot.img), it is imperative that you erase the complete device storage, so that all of the encrypted data, and protocols could be removed.

Now, that you know what forced encryption is and how it works, you can begin with the process below.

Before you begin, you must install Android SDK and set-up, for ADB and fastboot access. Alternatively, you can also use 15 Seconds ADB Installer. Also, make sure to backup your complete internal storage. The process will wipe your device completely.

Download the kernel corresponding to your Android version and build number:

Instructions

Downloading the modified boot image is where we start. And when that is done, you are ready to flash it on your 6P using fastboot. Power off your 6P completely. When it is off, press and hold the Volume Down and Power keys, until you see the bootloader screen (refer to the image below).

Connect your 6P to the PC while it is in boootloader mode.

Open the folder where the modified ‘boot.img‘ file was downloaded. Press SHIFT key and right-click on a space inside this folder. Select Open command window here, from the menu that appears.

Enter the following command:

fastboot devices

The command should return a device ID. In case it doesn’t, make sure that the device has been connected properly in bootloader mode.

Enter the following command in the CMD window that just opened:

fastboot flash boot boot.img

By following the step above, you have ensured that the device would not encrypt the storage on boot. It is time to decrypt the device:

Dhananjay (DJ) is an Android devotee and a Tech Blogger by profession. He is a keen undergraduate, seeking and working hard on his ambitions to achieve something distinctive in his life. He prefers interacting with his readers in the most reproaching manner possible and his desires here are not just to reach out the tech figures, but also attract those non-interested minds to our Android universe. He proudly owns Nexus 6P, Nexus 5, OnePlus One and a Nexus 4.

Hello. Several users here including me have successfully decrypted our 6P using this method. If you’re suffering from a bootloop (stuck on the animation screen), there might be a few cases, and I would need more information about it.

2) Also, before flashing and wiping were you able to boot into Preview 2?

Eric Garcia

So what happens when the new factory images come in next month and I want to update? How would I do this without going back to encryption? Can I just download the factory images from Google and flash as usual? Or do I have to flash the modified boot.img every time a new build number is released?

let me explain.i bought this nexus 6p and everything work great but after i reset it asked for google account which i don’t know it.after many tries i was able to “step in” and i have access to settings but i cant enter developer mode with traditional 7 tap on build number and of course i can’t enable OEM unlock.Do you have any ideea how to manage this?

I have just contacted you personally over skype. Kindly edit the previous comment and remove your Skype username, for privacy reasons.

Gabi

thank you i edit comment

Guillaume Tounou

i am facing the same issue , i can’t enable the developers options menu .it’s the first time that i reset the phone after buying it from someone on gumtree ( it’s like ebay) and i realized now that the device has google protection , i have tried to contact the seller but seems that he’s vanished

Hello Tmoney, I am sorry the modified boot.img for your mention build is not available yet. However, if you want to decrypt you can do it in a different way.
1) Backup everything on the storage because you will lose data.
2) You must have an unlocked bootloader with TWRP installed.
3) Download SuperSU flash-able zip: https://s3-us-west-2.amazonaws.com/supersu/download/zip/SuperSU-v2.79-201612051815.zip
4) Go to TWRP > Wipe > Format Data, and follow the instructions.
5) Once the wiping procedure is done, transfer the SuperSU zip to the storage by connecting your device to the PC.
6) Disconnect the device. Go to Install and flash the zip.